Incident Response
IR-03Notify the sponsor bank immediately of a breach and keep it informed to closure
How Leela would run itEvent-driven · immediately on a breach; within 4 hours of confirming a Critical incident; daily until resolved; closure report within 10 business days
From the policy libraryThe requirement
Any breach at the Company or a critical service provider that discloses account holder data or other sponsor bank confidential information is reported to the sponsor bank immediately, with the nature of the breach and the corrective action taken, and the disclosure is stopped or limited at once. Any Critical incident is reported to the bank’s chief compliance officer and chief risk officer within four hours of confirmation, updated at least daily until resolution, and closed with a written report within ten business days. The bank may send an assessor, and the Company gives the access requested.
- Applies
- Tell Leela about your company to see whether this applies.
- Status
- Setup needed
Tell Leela how you handle it today, or hand it over: see what’s next.
The work
Send the initial notice to the bank’s named contacts, log the time, deliver a daily update while the incident is open, and file the closure report with the timeline, root cause, remediation, and customer-notice evidence.
What Leela keepsThe evidence this obligation leaves, as the work happens
Listed from the policy libraryContents
- 01Sponsor bank noticeInitial notice with the time sent, against the confirmation time
- 02Update logDaily updates with dates until resolution
- 03Incident closure reportWritten report delivered within 10 business days of resolution
Evidence
Sponsor bank notice
Incident Response §5.1, §5.3, §5.4
3
of 3 records
The work and the records come from this obligation in the policy library.